有没有办法重写DNS响应的授权部分?

Summary

Utilizing CoreDNS and it's plugins, is there a way to override or rewrite the AUTHORITY SECTION of a DNS response?

Failed Solutions

I have been testing with the template plugin

# Corefile
.{
    template ANY ANY {
      rcode NXDOMAIN
      authority "{{ .Zone }} 60 {{ .Class }} SOA ns.invalid. hostmaster.invalid. (1 60 60 60 60)"
    }
}

However this returns for every DNS query. I would only want the above SOA record to be returned on NXDOMAIN errors.

Additional Information

I want to be able to return a dynamic SOA record in the near future, but being able to do it statically would be a great start.